compiler-rt/test/msan/bsearch.cpp

   1 // __NO_INLINE__ is defined so bsearch needs interceptor.
   2 // RUN: %clangxx_msan -fno-sanitize-memory-param-retval -O0 -g %s -o %t && %run %t
   3 // RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_DATA -O0 -g %s -o %t && not %run %t 2>&1 | FileCheck %s
   4 // RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_KEY -O0 -g %s -o %t && not %run %t 2>&1 | FileCheck %s
   5
   6 // __NO_INLINE__ is undefined so bsearch should be inlined and instrumented and still work as expected.
   7 // RUN: %clangxx_msan -fno-sanitize-memory-param-retval -O2 -g %s -o %t && %run %t
   8 // RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_DATA -O2 -g %s -o %t && not %run %t 2>&1 | FileCheck %s
   9 // RUN: %clangxx_msan -fno-sanitize-memory-param-retval -DPOISON_KEY -O2 -g %s -o %t && not %run %t 2>&1 | FileCheck %s
  10
  11 #include <assert.h>
  12 #include <stdlib.h>
  13
  14 #include <sanitizer/msan_interface.h>
  15
  16 long z;
  17
  18 __attribute__((noinline, optnone)) void
  19 poison_msan_param_tls(long a, long b, long c, long d, long e, long f) {
  20   z = a + b + c + d + e + f;
  21 }
  22
  23 static int compar(const void *a, const void *b) {
  24   int r = *(const long *)a - *(const long *)b;
  25   long x;
  26   __msan_poison(&x, sizeof(x));
  27   poison_msan_param_tls(x, x, x, x, x, x);
  28   return r;
  29 }
  30
  31 int main(int argc, char *argv[]) {
  32   constexpr size_t SZ = 27;
  33   long p[SZ + 1];
  34   for (int i = 0; i < SZ + 1; ++i)
  35     p[i] = i;
  36   p[SZ] = SZ / 3;
  37 #if defined(POISON_DATA)
  38   __msan_poison(p, sizeof(long) * SZ / 2);
  39 #elif defined(POISON_KEY)
  40   __msan_poison(p + SZ, sizeof(long));
  41 #endif
  42   const long *r = (const long *)bsearch(p + SZ, p, SZ, sizeof(long), compar);
  43   // CHECK: MemorySanitizer: use-of-uninitialized-value
  44
  45   assert(r == p + SZ / 3);
  46
  47   return 0;
  48 }